ClawEmail Admin

This skill is internally coherent, but it talks to an external provider (https://clawemail.com) whose source/homepage is not included in the registry metadata. Before installing or exporting your CLAWEMAIL_API_KEY: 1) Verify the ClawEmail service and its owner (privacy, terms, support contact). 2) Treat CLAWEMAIL_API_KEY like a high-privilege credential — only store it in a trusted secrets manager, and avoid placing it in shared shells or logs. 3) Expect the skill (and anyone with the key) can create, suspend, or delete Workspace accounts; consider using a scoped/limited API key and rotate/revoke it when not needed. 4) The workflow returns temporary passwords and OAuth credentials — store/revoke those securely and audit created accounts. 5) If you cannot verify the provider, prefer the documented self-service signup flow (Stripe checkout) or manually create accounts rather than giving the API key to an agent. If you want higher confidence about this skill, ask the publisher for a homepage, documentation, or proof of ownership and a privacy/security policy.